Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
File: QCc8FepF3zcZPjRbae3YP4xvIgI.mft (raw, json)
Hash identifier: jKyR8TxxjMWyeZC6NE+QkZ7OIRWagdSH5n1+jrDEs4M=
Subject key identifier: 9D:CE:89:43:AC:B9:3C:C4:91:20:D6:54:F0:C5:76:7D:00:8D:00:1C
Authority key identifier: 40:27:3C:15:EA:45:DF:37:19:3E:34:5B:69:ED:D8:3F:8C:6F:22:02
Certificate issuer: /CN=40273c15ea45df37193e345b69edd83f8c6f2202
Certificate serial: 019A71EEAD9161582A7DC8AD8133FCA9E7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
Manifest number: 0265
Signing time: Tue 11 Nov 2025 08:00:58 +0000
Manifest this update: Tue 11 Nov 2025 08:00:58 +0000
Manifest next update: Wed 12 Nov 2025 08:00:58 +0000
Files and hashes: 1: QCc8FepF3zcZPjRbae3YP4xvIgI.crl (hash: EvmMBenqnnstNTFojCuZW9vGVLVrWrL4I3qaehcNMN4=)
2: rg92faZanaYES8NBj5pg8WmI5nI.roa (hash: 8R4hL47sFCLdHAmoIZE8IPnGm4ZN8Yi2FpnpcDwoEOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ad:91:61:58:2a:7d:c8:ad:81:33:fc:a9:e7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40273c15ea45df37193e345b69edd83f8c6f2202
Validity
Not Before: Nov 11 08:00:58 2025 GMT
Not After : Nov 12 08:00:58 2025 GMT
Subject: CN=9dce8943acb93cc49120d654f0c5767d008d001c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:68:45:d4:94:c0:ff:fc:e9:33:bc:f9:22:9f:
e6:3d:45:5e:c8:43:23:14:dc:06:ca:dd:6b:96:fa:
20:7f:1c:c2:ad:6f:7f:94:49:66:16:d7:ee:fb:ce:
f0:56:d2:10:64:fe:72:18:c6:09:9f:ec:83:bb:d6:
94:74:e1:1f:da:9d:c7:d4:f6:ed:72:4a:75:6e:95:
61:fa:fd:6a:fa:53:b2:44:56:4d:48:32:08:7d:2e:
3a:2e:b5:9d:71:ad:9b:cf:fd:25:e0:fa:41:1a:ba:
15:b8:04:43:40:89:dd:ab:31:6b:bf:b1:84:0e:b9:
06:19:ad:91:fe:e8:dc:12:19:66:50:2c:28:c7:48:
87:4d:95:74:70:67:43:8a:b4:6f:00:00:ee:02:1b:
fb:8c:e9:52:36:11:c3:eb:6c:4f:55:68:fd:bf:87:
88:f7:ad:a8:a5:75:c4:36:ed:79:da:bc:2b:1f:e0:
cb:db:f4:a3:12:c4:2b:e3:b2:26:71:dc:db:b6:0c:
2d:a6:4e:5a:a1:2e:83:17:2b:65:fa:64:40:54:09:
48:e8:e9:97:e1:2d:4c:44:6f:db:66:26:13:3b:0b:
5e:76:cd:b8:07:cf:f5:59:63:2b:5c:71:64:ba:b5:
ee:b7:e4:c2:c6:5e:51:bc:a1:5b:49:a4:d7:3f:4c:
f0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CE:89:43:AC:B9:3C:C4:91:20:D6:54:F0:C5:76:7D:00:8D:00:1C
X509v3 Authority Key Identifier:
keyid:40:27:3C:15:EA:45:DF:37:19:3E:34:5B:69:ED:D8:3F:8C:6F:22:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:37:0c:43:b2:f6:4f:fe:e2:85:5d:95:26:0e:49:4c:05:ac:
d7:e4:00:50:ab:2c:a8:8e:3e:21:2f:05:15:03:eb:40:f6:4c:
07:c8:b9:85:c3:16:be:73:3d:2f:22:d4:2d:a7:00:aa:6b:8b:
62:83:64:09:94:d0:a4:5a:99:67:41:bd:cc:39:d5:c0:3d:ea:
bc:27:9b:5c:50:95:65:32:90:f2:2b:85:91:b6:d4:07:10:41:
36:9a:fe:9c:12:98:a2:65:40:af:fa:64:6f:88:f8:5b:a0:1f:
1d:f9:3d:fd:06:ac:42:65:51:ce:e2:51:52:b8:c5:6e:e0:18:
d1:bc:b3:36:35:4a:66:2d:f3:6d:06:14:07:b9:6d:aa:e4:29:
57:9f:e6:00:be:bf:eb:97:62:6b:44:ce:09:38:2e:9a:5c:e0:
a9:00:a2:3e:df:28:a3:af:42:76:85:4a:4f:b4:67:89:41:b9:
fc:6b:69:0a:e0:26:4c:29:78:e2:48:e4:56:c3:1a:33:d5:af:
c6:96:fb:9e:b5:2c:01:b1:e7:7b:8d:ed:8b:02:fe:d8:06:f4:
54:1d:fd:dc:4f:ca:b0:ac:bd:61:47:67:97:be:bc:66:3f:ec:
7c:b8:7b:b1:19:da:65:11:54:2f:7d:2e:d0:f5:55:3a:a3:fc:
6a:e0:e8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:00:56 2025 by rpki-client